As students are finishing up finals and getting ready to pack up their dorms for the winter break, Ohio State University has started notifying more than 760,000 students, professors and others that their names and Social Security numbers might have been compromised in one of the largest and most costly breaches to hit a college campus.

Ohio State expects to spend about $4 million to pay for the forensic investigation and credit-protection services for those whose personal information was on a server that was hacked.

Since 2008, colleges have discovered 158 breaches resulting in the possible compromising of more than 2.3million records, according to Application Security Inc., a New York security firm.